Page 2 - Warnings and cautions
FortiGate-5001FA2 Security System Guide 01-30000-0379-20080606 Warnings and cautions Only trained and qualified personnel should be allowed to install or maintain FortiGate-5000 series equipment. Read and comply with all warnings, cautions and notices in this document. • Turning off all power switch...
Page 3 - Contents
Contents FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 3 Contents Warnings and cautions ..................................................................................... 2 FortiGate-5001FA2 security system ................................. 5 Front panel LEDs and connectors .........
Page 6 - Front panel LEDs and connectors; LEDs
FortiGate-5001FA2 Security System Guide 6 01-30000-0379-20080606 Front panel LEDs and connectors FortiGate-5001FA2 security system The FortiGate-5001FA2 board comes supplied with four optical or four copper SFP transceivers. Before you can connect FortiGate-5001FA2 interfaces 1 to 4, you must insert...
Page 7 - Connectors; Accelerated packet forwarding and policy enforcement
FortiGate-5001FA2 security system Accelerated packet forwarding and policy enforcement FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 7 Connectors Table 2 lists and describes the FortiGate-5001FA2 connectors. Accelerated packet forwarding and policy enforcement FortiGate-5001FA2 Accel...
Page 8 - FA2 interfaces and active-active HA performance; Base backplane gigabit communication
FortiGate-5001FA2 Security System Guide 8 01-30000-0379-20080606 Base backplane gigabit communication FortiGate-5001FA2 security system • Session Oriented Traffic with long session lifetime, such as FTP sessions. Packet size does not affect performance for traffic with long session lifetime. For lon...
Page 9 - Hardware installation; RAM DIMMs; To install FortiGate-5001FA2 RAM DIMMs
Hardware installation RAM DIMMs FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 9 Hardware installation Before use, the FortiGate-5001FA2 board must be correctly inserted into an Advanced Telecommunications Computing Architecture (ACTA) chassis such as the FortiGate-5140, FortiGate-505...
Page 10 - Installing SFP transceivers
FortiGate-5001FA2 Security System Guide 10 01-30000-0379-20080606 Installing SFP transceivers Hardware installation Figure 2: Location of FortiGate-5001FA2 RAM DIMM slots 3 Insert each RAM DIMM perpendicular to the RAM DIMM slots. Push the DIMM firmly into place using the minimum amount of force req...
Page 11 - To install SFP transceivers; Changing FortiGate-5001FA2 jumper settings
Hardware installation Changing FortiGate-5001FA2 jumper settings FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 11 You can install the following types of SFP transceivers for connectors 1, 2, 3, and 4: • optical SFP transceivers • SFP 1000Base-LX, SM module• SFP 1000Base-SX, MM module...
Page 13 - To change or verify the JP3 jumper setting; Inserting a FortiGate-5001FA2 board into a chassis
Hardware installation Inserting a FortiGate-5001FA2 board into a chassis FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 13 To change or verify the JP3 jumper setting To complete this procedure, you need: • A FortiGate-5001FA2 board• A tool for moving jumpers (optional)• An electrostat...
Page 14 - Before inserting the FortiGate-5001FA2 board in a chassis; Insertion procedure; Closed
FortiGate-5001FA2 Security System Guide 14 01-30000-0379-20080606 Inserting a FortiGate-5001FA2 board into a chassis Hardware installation Figure 4: FortiGate-5001FA2 mounting components Before inserting the FortiGate-5001FA2 board in a chassis Before installing the FortiGate-5001FA2 board in a chas...
Page 17 - Removing a FortiGate-5001FA2 board from a chassis
Hardware installation Removing a FortiGate-5001FA2 board from a chassis FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 17 Removing a FortiGate-5001FA2 board from a chassis The following procedure describes how to correctly use the FortiGate-5001FA2 mounting components shown in Figure ...
Page 18 - Troubleshooting; FortiGate-5001FA2 does not startup
FortiGate-5001FA2 Security System Guide 18 01-30000-0379-20080606 Troubleshooting Hardware installation 5 Open the left and right handles to their fully open positions. Opening the handles slides the board a short distance out of the slot, disconnecting the board from the chassis backplane. The IPM ...
Page 20 - All chassis: Firmware problem; FortiGate-5001FA2 cannot display chassis information
FortiGate-5001FA2 Security System Guide 20 01-30000-0379-20080606 Troubleshooting Hardware installation All chassis: Firmware problem If the FortiGate-5001FA2 board power switch is connected and the JP3 jumper and shelf manager are set as required, and the FortiGate-5001FA2 still does not start up, ...
Page 21 - Quick Configuration Guide; Registering your Fortinet product; Planning the configuration
Quick Configuration Guide Registering your Fortinet product FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 21 Quick Configuration Guide This section is a quick start guide to connecting and configuring a FortiGate-5001FA2 security system for your network. Before using this chapter, yo...
Page 22 - Transparent mode
FortiGate-5001FA2 Security System Guide 22 01-30000-0379-20080606 Planning the configuration Quick Configuration Guide NAT/Route mode In NAT/Route mode, the FortiGate-5001FA2 security system is visible to the networks that it is connected to. Each interface connected to a network must be configured ...
Page 23 - Choosing the configuration tool
Quick Configuration Guide Choosing the configuration tool FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 23 Figure 8: Example FortiGate-5001FA2 board operating in Transparent mode You would typically deploy a FortiGate-5001FA2 security system in Transparent mode on a private network b...
Page 24 - Factory default settings
FortiGate-5001FA2 Security System Guide 24 01-30000-0379-20080606 Factory default settings Quick Configuration Guide Factory default settings The FortiGate-5001FA2 unit ships with a factory default configuration. The default configuration allows you to connect to and use the FortiGate-5001FA2 web-ba...
Page 25 - Using the web-based manager to configure NAT/Route mode; To change the admin administrator password; To configure the Default Gateway
Quick Configuration Guide Configuring NAT/Route mode FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 25 Using the web-based manager to configure NAT/Route mode 1 Connect port1 of the FortiGate-5001FA2 board to the same hub or switch as the computer you will use to configure the FortiGa...
Page 26 - Using the CLI to configure NAT/Route mode
FortiGate-5001FA2 Security System Guide 26 01-30000-0379-20080606 Configuring NAT/Route mode Quick Configuration Guide Using the CLI to configure NAT/Route mode 1 Use the serial cable supplied with your FortiGate-5001FA2 board to connect the FortiGate Console port to the management computer serial p...
Page 27 - Configuring Transparent mode; Using the web-based manager to configure Transparent mode; To switch from NAT/Route mode to transparent mode
Quick Configuration Guide Configuring Transparent mode FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 27 Configuring Transparent mode Use Table 7 to gather the information you need to customize Transparent mode settings. Using the web-based manager to configure Transparent mode 1 Conn...
Page 28 - To configure the Primary and Secondary DNS server IP addresses; Using the CLI to configure Transparent mode; Upgrading FortiGate-5001FA2 firmware; To upgrade the firmware using the web-based manager
FortiGate-5001FA2 Security System Guide 28 01-30000-0379-20080606 Upgrading FortiGate-5001FA2 firmware Quick Configuration Guide To configure the Primary and Secondary DNS server IP addresses 1 Go to System > Network > Options . 2 Enter the Primary and Secondary DNS IP addresses that you added...
Page 29 - System Information > Firmware Version
Quick Configuration Guide Upgrading FortiGate-5001FA2 firmware FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 29 4 Under System Information > Firmware Version , select Update. 5 Type the path and filename of the firmware image file, or select Browse and locate the file. 6 Select OK...
Page 30 - FortiGate-5001FA2 base backplane data communication
FortiGate-5001FA2 Security System Guide 30 01-30000-0379-20080606 FortiGate-5001FA2 base backplane data communication Quick Configuration Guide FortiGate-5001FA2 base backplane data communication You can configure the FortiGate-5001FA2 boards for data communications using the two FortiGate-5140, For...
Page 31 - Powering off the FortiGate-5001FA2 board; To power off a FortiGate-5001FA2 board; Unit
Quick Configuration Guide Powering off the FortiGate-5001FA2 board FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 31 Figure 9: FortiGate-5001FA2 interface list with backplane interfaces enabled To enable base backplane data communication from the FortiGate-5001FA2 CLI From the FortiGa...
Page 33 - For more information; Fortinet documentation; Fortinet Tools and Documentation CD; Customer service and technical support; Register your Fortinet product
For more information Fortinet documentation FortiGate-5001FA2 Security System Guide01-30000-0379-20080606 33 For more information Support for your Fortinet product is available as online help from within the web-based manager, from the Tools and Documentation CD included with the product, on the For...
Page 34 - Trademarks
FortiGate-5001FA2 Security System Guide 01-30000-0379-20080606 www.fortinet.com © Copyright 2008 Fortinet, Inc. All rights reserved. No part of this publication including text, examples, diagrams or illustrations may be reproduced, transmitted, or translated in any form or by any means, electronic, ...